CVE-2014-125097

MEDIUM 6.1CVE-2014-125097 · Published 10/04/2023 · updated 17/06/2026

In short

CVE-2014-125097 is a MEDIUM (CVSS 6.1) vulnerability affecting facebook button (bestwebsoft).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.9% of all vulnerabilities.
Fix: update to 2.34 or later.

Package	Affected versions	Patched versions
facebook button bestwebsoft	`< 2.34`	`2.34`

Description

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.34 is able to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrade the affected component. VDB-225354 is the identifier assigned to this vulnerability.

References

wp-plugins/facebook-button-plugin commit b766da8 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

More vulnerabilities in facebook button

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free